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□ This report Is based on translations from the original language into the following language , 
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1-10 

Claims, Numbers 
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Drawings, Sheets 

1/4-4AV 



received on 31 .03.2005 with letter of 28.03.2005 
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Supplemental Box (Rule 70.2(c)). 

□ the description, pages 

□ the claims, Nos. 
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Box No V Reasoned statement under Article 36(2) with regard to novelty, inventive step or Industrial 
SSjjlt^&m and explanations supporting such statement 



1. Statement 
Novelty (N) 

Inventive step (IS) 

Industrial applicability (IA) 



Yes: Claims 

No: Claims 

Yes: Claims 

No: Claims 

Yes: Claims 

No: Claims 



1-21 



1-21 



1-21 



2. Citations and explanations (Rule 70.7): 
see separate sheet 
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V Reasoned statement under Rule 66.2(a)(ll) with regards to novelty, inventive step 
and Industrial applicability; citations and explanations supporting such statement 

The following documents (D) are mentioned for the first time in this report: 

D1 • US 2002/1 1 6338 A1 (GONTHIER JEAN-CHARLES ET AL) 22 August 2002 
D2* EP-A-1 320 214 (MARKPORT LTD) 18 June 2003 (2003-06-18) 
D3' WEI-LING WANG ET AL: "A protocol for billing mobile network access devices 
' operating in foreign networks" PROCEEDINGS - THE WORKSHOP ON 
ENABLING TECHNOLOGIES: INFRASTRUCTURE FOR COLLABORATIVE 
ENTERPRISES, IEEE COMPUTER SOCIETY PRESS, LOS ALAMITOS, CA, 
US, 17 June 1998 (1998-06-17), pages 262-268, XP002145933 ISSN: 1080- 
1383 

D4: EP-A-1 246 445 (NORTEL NETWORKS LTD) 2 October 2002 (2002-10-02) 

1 . Independent claim 1 meets the requirements of Article 33(2) and 33(3) PCT. 

The application relates to the authorisation of access of a user to a network through 
an access point. 

D1 which is the closest prior art, discloses, according to the main features of claim 1 , 
a method for processing user requests for credit based network access compnsmg 
(see in particular figure 2, step 30, 32): 

receiving, by an access point, in the network a user request for a user access 
from a client device according to an authentication protocol (D1 : paragraph 26, 
lines 1 -5, Figure 2, step 30 and paragraph 1 8 mentioning WLAN) 
forwarding, by said AP, user credential to an authentication server in response 
to said user request (D1 : paragraph 26, lines 5-8, Figure 2, step 32) 
receiving, by said access point, an access response from said authentication 
server authenticating said user access for said client device, the access 
response containing parameter having credit value indicative of a length of 
available continued access of the client device to the network based on 
remaining user credit (D1 : paragraph 26, last 5 lines and paragraphs 27-30, 
figure 2, step 36) 
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The difference between the subject-matter of claim 1 and the disclosure of D1 , 
therefore, lies in the following steps: ♦^.„v^;» 
- transmitting, by said AP, a re-authorisation request to sait 1 client device in 
response to said credit parameter value reaching a threshold value to cause a 
re-authentication of said client device with said network to occur 

. receiving from said client and forwarding, by said AP, user credentials tc > said 
authentication server before granting further access to the network by sa/d cl,ent 
device 

The technical effect of the different is that the management of the user credential 
occurs in the client device and not in a server in the network as .t .s the case .n D1 . 
Uproblem solved by claim 1 with regards to D1 is how to reach the techmca. effect 
mentioned above. 

The solution of claim 1 is not present in D1 . Indeed, in D1 , there is no 
^authorisation request to said client device. Furthermore, there ,s no .nd.caton^ M 
this could be done. Indeed, as indicated by figure 2 of D1 , the management of the 
user credential is only done in the PPS server and the mobile tormina, does not take 
oart to it The mobile terminal is only involved when it will increase his credit by 
contacting the customer care (see in particular paragraph 46). The same remark 
applies to D2-D4. 

Independent claim 1 , therefore, meets the requirements of Article 33(2) and 
33(3) PCT. 

2 Independent claim 12 is a repetition of the subject-matter of claim 1 and, hence 
' meets the requirements of Article 33(2) and 33(3) PCT for the same reason. 

3. The dependent claims meet the requirements of Article 33(2) and 33(3) for the same 
reasons as claim 1 and 12. 

4. There is a problem of clarity for claim 17 as to its category. 
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A claim for an apparatus should contain structural features (e.g. "means for..." or 
-means arranged in such a way as to...") as opposed to process features (Article 6 
PCT). 

The formulation "the authentication server retrieves ... and denies..." is not 
considered as defining structural features but as defining functions (i.e. an activity). 

The Applicant should have amended claim 17 in such a way that it is clearly an 
apparatus claim. 

5. Claims shall be numbered consecutively (Rule 6.1 (b) PCT). Therefore, the numbering 
of the claims should be redone. 

6 If the Applicant is aware of documents reflecting the prior art described in the 
beginning of the Application, he should have identify these documents in the 
description according to Rule 5.1(a)(ii) PCT. 

To meet the requirements of Rule 5.1(a)(ii) PCT, D1 should also have been identified 
in the description and the relevant background art disclosed therein should have 
been briefly discussed. 

To meet the requirements of Rule 6.3(b) PCT, the independent claims should have 
been properly cast in the two-part form, with those features which in combination 
are part of the prior art (see D1), being placed in the preamble. 

7 Reference signs in parentheses should have been inserted in the claims to increase 
their intelligibility, Rule 6.2(b) PCT. This applies to both the preamble and 
characterising portion. 

8 The vague statement concerning the scope of protection in page 1 0, lines 20-28 
should have been deleted (PCT Guidelines 5.30 and Article 6 PCT). 

9 The general statement "incorporated herein by reference" in page 1 line 6 is not 

~ clear. Therefore, either a short acknowledgement of the relevant subject-matter of the 
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corresponding document, to which said statement refers, should In .accordance .with 
Article 34(2)(b) PCT, have been added to the description, or, if said document is not 
relevant for the performance of the invention, such statement should have been 
deleted. 
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CLAIMS 

1. (AMENDED) A method for processing user requests for 
credit based network access comprising: 

receiving, by an access point (AP) in the network, a user 
request for user access from a client device according to an 
authentication protocol; 

forwarding, by said AP, user credentials to an 
authentication server in response to said user request; 

receiving, by said AP, an access response from said 
authentication server authenticating said user access for said 
client device, the access response containing a parameter 
having a credit value indicative of a length of available 
continued access of the client device to the network based on 

remaining user credit; 

transmitting, by said AP, a re-authorization request to 
said client device in response to said credit parameter value 
reaching a threshold value to cause a re- authentication of 
said client device with said network to occur; and 

receiving from said client and forwarding, by said AP, 
user credentials to said authentication server before granting 
further access to the network by said client device. 

2. (ORIGINAL) The method of claim 1, wherein said 
parameter comprises a session- timeout parameter associated 
with IEEE 802. IX authentication protocol. 

3. (AMENDED) The method of claim 1, further comprising 
transmitting by said authentication server, a re-authentication 
response for re-establishing access to said network based on 
said credit parameter value associated with the client device 
on said authentication server. 
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4. (AMENDED) The method of claim 3, wherein the re- 
authentication response is based on the results of a comparison 
of said credit parameter value with said threshold value by 
said authorization server. 

5. (ORIGINAL) The method of claim 1, wherein said credit 
parameter value contained in said access response is based on 
one of: a) time usage; and b) traffic volume usage. 

6. (ORIGINAL) The method according to claim 1, wherein 
said network is a wireless Local Area network (WLAN) and 
further wherein said client device is a mobile communications 
device . 



7 . (CANCELLED) 

8. (CANCELLED) 

9. (CANCELLED) 

10. (CANCELLED) 

11. (CANCELLED) 



12. (AMENDED) A system comprising: 

an' access point for communicating with one of a plurality 
of client devices through a communications channel, said access 
point providing access to a network based on an authentication 
of said client device via an authentication server according to 
an authentication protocol, 

wherein said access point is further responsive to an 
access response from an authentication server authenticating 
one of said client devices having requested access to said 
network, which request was forwarded to said authentication 
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server via said access point, said access response containing a 
parameter having a value indicative of the length of available 
continued access of the client device based on an indicator of 
remaining user credit, so as to cause said access point to 
initiate a re-authentication process upon the expiration of a 
threshold value corresponding to said parameter value, by 
requiring the client device to re-provide user credentials to 
permit re-authentication of the client device before granting 
the client device further access to the network. 

13. (AMENDED) The system of claim 12, wherein the network 
operates using an 802.1 X authentication protocol, and wherein 
the authentication server is a RADIUS authentication server and 
further wherein said network is a wireless Local Area Network 
(WLAN) and said client device is a mobile communications 
device . 

14. (AMENDED) The system of claim 12, wherein said 
parameter value comprises a session-timeout parameter. 

15. (AMENDED) The system of claim 13, wherein said RADIUS 
authentication server contains memory for storing said 
indicator of remaining user credit. 

16. (AMENDED) The system of claim 12, wherein said 
parameter value contained in said access response is based on 
one of: a) time usage; and b) traffic volume usage. 

17. (AMENDED) The system of claim 15, wherein in response 
to a re-authentication request associated with the client 
device received from the AP, the authentication server 
retrieves said indicator of remaining user credit and denies 
re-authentication of said client device when said indicator of 
remaining user credit drops below a threshold value. 
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18. (AMENDED) The system of claim 17, wherein the 
indicator of remaining user credit comprises a credit timer 
indicative of the remaining credit balance of said user 
account, said credit timer being decremented according to a 
temporal access usage to the network by the client device. 

19. (AMENDED) The system of claim 17, wherein the 
authentication server periodically updates the credit timer of 
said user account in units of: a) time and b) traffic volume. 

20. (AMENDED) The method of claim 1, further comprising: 
calculating, by said authentication server in response to 

said user credentials, a session-timeout parameter value based 
on remaining user credit and network charges associated with 
said client device, said session-timeout parameter value 
indicative of the length of available continued access to the 
network; 

embedding, by said authentication server, said session- 
timeout parameter value in said access response message 
authenticating said associated client device for network 
access; 

activating, by said authentication server, a credit timer 
having a value indicative of remaining user credit balance 
associated with said client device, said credit timer 
decremented according to a temporal access usage; and 

receiving by said authentication server said user 
credentials in. response to said re-authorization request for 
re-authenticating said user access for said associated client 
device, comparing said credit timer value associated with said 
client device with a predetermined threshold value, and 
determining whether said client device is de-authenticated from 
further access to the network based on said comparison. 

21. (ORIGINAL) The method of claim 20, further 
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comprising transmitting by said authentication server a de- 
authentication response message to said AP when said credit 
timer value is below said predetermined threshold value. 



22. (CANCELLED) 

23. (CANCELLED) 

24. (CANCELLED) 

25. (CANCELLED) 

26. (CANCELLED) 

27 . (CANCELLED) 

28. (CANCELLED) 

29. (CANCELLED) 

30. (CANCELLED) 
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